<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I took out the ssl bump but I added the 1 that was missing from your list below with no positive results. Windows update just spins and eventually times out. This is what my config looks like if you have any advice. Again, the proxy is working for normal
web traffic, just not with windows update.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
visible_hostname squid</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
workers 6</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
cache_mem 1024 MB</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
maximum_object_size_in_memory 1024 KB</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
memory_cache_shared on</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
range_offset_limit 200 MB</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
maximum_object_size 200 MB</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
cache_dir aufs /var/scached 4096 16 256</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
access_log /var/log/squid/access.log squid</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
cache_mgr manager</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
cachemgr_passwd none all</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
http_access allow manager localhost</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
http_access deny manager</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
#Handling HTTP requests</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
http_port 3129 intercept</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
acl blocked url_regex gmail</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
http_access deny blocked</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
acl allowed_http_sites dstdomain "/etc/squid/allowed-sites.txt"</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
http_access allow allowed_http_sites</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
#Handling HTTPS requests</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
https_port 3130 cert=/etc/squid/ssl/squid.pem ssl-bump intercept</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
acl SSL_port port 443</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
http_access allow SSL_port</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
acl allowed_https_sites ssl::server_name "/etc/squid/allowed-sites.txt"</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
acl step1 at_step SslBump1</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
acl step2 at_step SslBump2</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
acl step3 at_step SslBump3</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
ssl_bump peek step1 all</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
ssl_bump peek step2 allowed_https_sites</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
ssl_bump splice step3 allowed_https_sites</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
ssl_bump terminate step2 all</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature" class="elementToProof" style="color: inherit;">
<div id="divtagdefaultwrapper" dir="ltr" style="background-color: rgb(255, 255, 255); color: inherit;">
<div style="background-color: rgb(255, 255, 255); margin: 0px;">
<p style="text-align: left; line-height: 11.55pt; background-color: white; margin: 0in; font-size: 11pt;">
<span style="font-family: Calibri, sans-serif; color: black;"><b>Doug Tucker</b><br>
Sr. Director of Networking and Linux Operations</span></p>
<p style="text-align: left; line-height: 15.4px; background-color: white; margin: 0in; font-size: 11pt;">
<span style="font-family: Calibri, sans-serif; color: black;"><b>o:</b> 817.975.5832 <br>
<b>e: </b>doug.tucker@navigaglobal.com </span></p>
<p style="text-align: left; line-height: 15.4px; background-color: white; margin: 0in; font-size: 11pt;">
<span style="font-family: Calibri, sans-serif; color: rgb(0, 0, 0);"><br>
</span></p>
<div style="background-color: white; margin: 0px 0in;">
<p style="text-align: left; line-height: 15.4px; font-family: "Times New Roman"; font-size: 12pt;">
<span style="color: rgb(0, 0, 0);">Newscycle Solutions is now Naviga. Learn more.</span></p>
<p style="text-align: left; line-height: 15.4px; font-family: "Times New Roman"; font-size: 12pt;">
<span style="color: rgb(0, 0, 0);"><br>
</span></p>
<p style="text-align: left; line-height: 15.4px; font-family: "Times New Roman"; font-size: 12pt;">
<span style="color: rgb(0, 0, 0);">CONFIDENTIALITY NOTICE: The contents of this email message and any attachments are intended solely for the addressee(s) and may contain confidential and/or privileged information and may be legally protected from disclosure.
If you are not the intended recipient of this message or their agent, or if this message has been addressed to you in error, please immediately alert the sender by reply email and then delete this message and any attachments. If you are not the intended recipient,
you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibite</span></p>
<div style="text-align: justify; line-height: 15.4px; font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> NgTech LTD <ngtech1ltd@gmail.com><br>
<b>Sent:</b> Sunday, March 16, 2025 6:43 PM<br>
<b>To:</b> Doug Tucker <doug.tucker@navigaglobal.com><br>
<b>Cc:</b> squid-users@lists.squid-cache.org <squid-users@lists.squid-cache.org><br>
<b>Subject:</b> Re: [squid-users] windows updates</font>
<div> </div>
</div>
<div>
<table border="0" cellspacing="0" cellpadding="0" width="100%" align="left" style="background:revert!important; border:revert!important; bottom:revert!important; color:revert!important; direction:revert!important; display:revert!important; font-size:revert!important; height:revert!important; letter-spacing:revert!important; line-height:revert!important; margin:revert!important; opacity:revert!important; order:revert!important; outline:revert!important; overflow:revert!important; padding:revert!important; position:revert!important; tab-size:revert!important; table-layout:revert!important; text-align:revert!important; text-indent:revert!important; text-orientation:revert!important; text-overflow:revert!important; text-transform:revert!important; top:revert!important; vertical-align:revert!important; visibility:revert!important; white-space:revert!important; width:revert!important; word-break:revert!important; word-spacing:revert!important; writing-mode:revert!important; zoom:revert!important; border:0!important; display:table!important; width:100%!important; table-layout:fixed!important; border-collapse:seperate!important; float:none!important; border-spacing:0px 0px!important">
<tbody style="background:revert!important; border:revert!important; bottom:revert!important; color:revert!important; direction:revert!important; display:revert!important; font-size:revert!important; height:revert!important; letter-spacing:revert!important; line-height:revert!important; margin:revert!important; opacity:revert!important; order:revert!important; outline:revert!important; overflow:revert!important; padding:revert!important; position:revert!important; tab-size:revert!important; table-layout:revert!important; text-align:revert!important; text-indent:revert!important; text-orientation:revert!important; text-overflow:revert!important; text-transform:revert!important; top:revert!important; vertical-align:revert!important; visibility:revert!important; white-space:revert!important; width:revert!important; word-break:revert!important; word-spacing:revert!important; writing-mode:revert!important; zoom:revert!important; display:block!important">
<tr style="background:revert!important; border:revert!important; bottom:revert!important; color:revert!important; direction:revert!important; display:revert!important; font-size:revert!important; height:revert!important; letter-spacing:revert!important; line-height:revert!important; margin:revert!important; opacity:revert!important; order:revert!important; outline:revert!important; overflow:revert!important; padding:revert!important; position:revert!important; tab-size:revert!important; table-layout:revert!important; text-align:revert!important; text-indent:revert!important; text-orientation:revert!important; text-overflow:revert!important; text-transform:revert!important; top:revert!important; vertical-align:revert!important; visibility:revert!important; white-space:revert!important; width:revert!important; word-break:revert!important; word-spacing:revert!important; writing-mode:revert!important; zoom:revert!important">
<td valign="middle" width="1px" bgcolor="#A6A6A6" cellpadding="7px 2px 7px 2px" style="background:revert!important; border:revert!important; bottom:revert!important; color:revert!important; direction:revert!important; display:revert!important; font-size:revert!important; height:revert!important; letter-spacing:revert!important; line-height:revert!important; margin:revert!important; opacity:revert!important; order:revert!important; outline:revert!important; overflow:revert!important; padding:revert!important; position:revert!important; tab-size:revert!important; table-layout:revert!important; text-align:revert!important; text-indent:revert!important; text-orientation:revert!important; text-overflow:revert!important; text-transform:revert!important; top:revert!important; vertical-align:revert!important; visibility:revert!important; white-space:revert!important; width:revert!important; word-break:revert!important; word-spacing:revert!important; writing-mode:revert!important; zoom:revert!important; padding:7px 2px 7px 2px!important; background-color:#A6A6A6!important; width:0px!important">
</td>
<td valign="middle" width="100%" bgcolor="#EAEAEA" cellpadding="7px 5px 7px 15px" color="#212121" style="background:revert!important; border:revert!important; bottom:revert!important; color:revert!important; direction:revert!important; display:revert!important; font-size:revert!important; height:revert!important; letter-spacing:revert!important; line-height:revert!important; margin:revert!important; opacity:revert!important; order:revert!important; outline:revert!important; overflow:revert!important; padding:revert!important; position:revert!important; tab-size:revert!important; table-layout:revert!important; text-align:revert!important; text-indent:revert!important; text-orientation:revert!important; text-overflow:revert!important; text-transform:revert!important; top:revert!important; vertical-align:revert!important; visibility:revert!important; white-space:revert!important; width:revert!important; word-break:revert!important; word-spacing:revert!important; writing-mode:revert!important; zoom:revert!important; width:100%!important; background-color:#EAEAEA!important; padding:7px 5px 7px 15px!important; font-family:wf_segoe-ui_normal,Segoe UI,Segoe WP,Tahoma,Arial,sans-serif!important; font-size:12px!important; font-weight:normal!important; color:#212121!important; text-align:left!important; word-wrap:break-word!important">
<div style="background:revert!important; border:revert!important; bottom:revert!important; color:revert!important; direction:revert!important; display:revert!important; font-size:revert!important; height:revert!important; letter-spacing:revert!important; line-height:revert!important; margin:revert!important; opacity:revert!important; order:revert!important; outline:revert!important; overflow:revert!important; padding:revert!important; position:revert!important; tab-size:revert!important; table-layout:revert!important; text-align:revert!important; text-indent:revert!important; text-orientation:revert!important; text-overflow:revert!important; text-transform:revert!important; top:revert!important; vertical-align:revert!important; visibility:revert!important; white-space:revert!important; width:revert!important; word-break:revert!important; word-spacing:revert!important; writing-mode:revert!important; zoom:revert!important">
You don't often get email from ngtech1ltd@gmail.com. <a href="https://aka.ms/LearnAboutSenderIdentification" style="background:revert!important; color:revert!important; direction:revert!important; display:revert!important; font-size:revert!important; opacity:revert!important; visibility:revert!important">
Learn why this is important</a> </div>
</td>
<td valign="middle" align="left" width="75px" bgcolor="#EAEAEA" cellpadding="7px 5px 7px 5px" color="#212121" style="background:revert!important; border:revert!important; bottom:revert!important; color:revert!important; direction:revert!important; display:revert!important; font-size:revert!important; height:revert!important; letter-spacing:revert!important; line-height:revert!important; margin:revert!important; opacity:revert!important; order:revert!important; outline:revert!important; overflow:revert!important; padding:revert!important; position:revert!important; tab-size:revert!important; table-layout:revert!important; text-align:revert!important; text-indent:revert!important; text-orientation:revert!important; text-overflow:revert!important; text-transform:revert!important; top:revert!important; vertical-align:revert!important; visibility:revert!important; white-space:revert!important; width:revert!important; word-break:revert!important; word-spacing:revert!important; writing-mode:revert!important; zoom:revert!important; width:75px!important; background-color:#EAEAEA!important; padding:7px 5px 7px 5px!important; font-family:wf_segoe-ui_normal,Segoe UI,Segoe WP,Tahoma,Arial,sans-serif!important; font-size:12px!important; font-weight:normal!important; color:#212121!important; text-align:left!important; word-wrap:break-word!important">
</td>
</tr>
</tbody>
</table>
<div>
<div dir="ltr">
<div>I have not tried to use SSL bump but with a regular proxy which blocks everything else then the next list of dstdomain:<br>
.<a href="http://delivery.mp.microsoft.com/" originalsrc="http://delivery.mp.microsoft.com/">delivery.mp.microsoft.com</a> (http)<br>
.<a href="http://dsp.mp.microsoft.com/" originalsrc="http://dsp.mp.microsoft.com/">dsp.mp.microsoft.com</a> (http)<br>
.<a href="http://download.windowsupdate.com/" originalsrc="http://download.windowsupdate.com/">download.windowsupdate.com</a> (http)</div>
<div><a href="http://static.edge.microsoftapp.net/" originalsrc="http://static.edge.microsoftapp.net/">static.edge.microsoftapp.net</a> (HTTPS-connect)<br>
<br>
The windows updates works just fine.</div>
<div>And as I wrote before, there are two channels: Secure for communication and plain HTTP for data transfer.<br>
<br>
If you need more help let me know.</div>
<div><br>
</div>
<div>
<div dir="ltr" class="x_gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">----<br>
Eliezer Croitoru<br>
Tech Support<br>
Mobile: +972-5-28704261<br>
Email: <a href="mailto:ngtech1ltd@gmail.com" target="_blank">ngtech1ltd@gmail.com</a><br>
</div>
</div>
</div>
<br>
</div>
<br>
<div class="x_gmail_quote x_gmail_quote_container">
<div dir="ltr" class="x_gmail_attr">On Sun, Mar 16, 2025 at 4:34 PM Doug Tucker <<a href="mailto:doug.tucker@navigaglobal.com">doug.tucker@navigaglobal.com</a>> wrote:<br>
</div>
<blockquote class="x_gmail_quote" style="margin:0px 0px 0px 0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex">
<div>
<div dir="auto">No, no one responded.</div>
<div id="x_m_-7666119030896451804ms-outlook-mobile-body-separator-line" dir="auto">
<br>
</div>
<div id="x_m_-7666119030896451804ms-outlook-mobile-signature" dir="auto">
<div dir="auto">Doug Tucker</div>
<div dir="auto">Sr. Director of Networking and Linux Operations</div>
<div dir="auto"><a href="mailto:doug.tucker@navigaglobal.com" target="_blank">doug.tucker@navigaglobal.com</a> </div>
</div>
<hr style="display:inline-block; width:98%">
<div id="x_m_-7666119030896451804divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> NgTech LTD <<a href="mailto:ngtech1ltd@gmail.com" target="_blank">ngtech1ltd@gmail.com</a>><br>
<b>Sent:</b> Sunday, March 16, 2025 2:38:35 AM<br>
<b>To:</b> Doug Tucker <<a href="mailto:doug.tucker@navigaglobal.com" target="_blank">doug.tucker@navigaglobal.com</a>><br>
<b>Cc:</b> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a> <<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>><br>
<b>Subject:</b> Re: [squid-users] windows updates</font>
<div> </div>
</div>
<div>
<table border="0" cellspacing="0" cellpadding="0" width="100%" align="left" style="background:revert; color:revert; direction:revert; font-size:revert; height:revert; letter-spacing:revert; line-height:revert; margin:revert; opacity:revert; outline:revert; overflow:revert; padding:revert; text-align:revert; text-indent:revert; text-orientation:revert; text-overflow:revert; text-transform:revert; vertical-align:revert; white-space:revert; word-break:revert; word-spacing:revert; writing-mode:revert; zoom:revert; border:0px; display:table; width:100%; table-layout:fixed; float:none; border-spacing:0px">
<tbody style="background:revert; border:revert; color:revert; direction:revert; font-size:revert; height:revert; letter-spacing:revert; line-height:revert; margin:revert; opacity:revert; outline:revert; overflow:revert; padding:revert; table-layout:revert; text-align:revert; text-indent:revert; text-orientation:revert; text-overflow:revert; text-transform:revert; vertical-align:revert; white-space:revert; width:revert; word-break:revert; word-spacing:revert; writing-mode:revert; zoom:revert; display:block">
<tr style="background:revert; border:revert; color:revert; direction:revert; display:revert; font-size:revert; height:revert; letter-spacing:revert; line-height:revert; margin:revert; opacity:revert; outline:revert; overflow:revert; padding:revert; table-layout:revert; text-align:revert; text-indent:revert; text-orientation:revert; text-overflow:revert; text-transform:revert; vertical-align:revert; white-space:revert; width:revert; word-break:revert; word-spacing:revert; writing-mode:revert; zoom:revert">
<td valign="middle" width="1px" bgcolor="#A6A6A6" cellpadding="7px 2px 7px 2px" style="background-image:revert; background-position:revert; background-size:revert; background-repeat:revert; background-origin:revert; background-clip:revert; border:revert; color:revert; direction:revert; display:revert; font-size:revert; height:revert; letter-spacing:revert; line-height:revert; margin:revert; opacity:revert; outline:revert; overflow:revert; table-layout:revert; text-align:revert; text-indent:revert; text-orientation:revert; text-overflow:revert; text-transform:revert; vertical-align:revert; white-space:revert; word-break:revert; word-spacing:revert; writing-mode:revert; zoom:revert; padding:7px 2px; background-color:rgb(166,166,166); width:0px">
</td>
<td valign="middle" width="100%" bgcolor="#EAEAEA" cellpadding="7px 5px 7px 15px" color="#212121" style="background-image:revert; background-position:revert; background-size:revert; background-repeat:revert; background-origin:revert; background-clip:revert; border:revert; direction:revert; display:revert; height:revert; letter-spacing:revert; line-height:revert; margin:revert; opacity:revert; outline:revert; overflow:revert; table-layout:revert; text-indent:revert; text-orientation:revert; text-overflow:revert; text-transform:revert; vertical-align:revert; white-space:revert; word-break:revert; word-spacing:revert; writing-mode:revert; zoom:revert; width:100%; background-color:rgb(234,234,234); padding:7px 5px 7px 15px; font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; font-size:12px; font-weight:normal; color:rgb(33,33,33); text-align:left">
<div style="background:revert; border:revert; color:revert; direction:revert; display:revert; font-size:revert; height:revert; letter-spacing:revert; line-height:revert; margin:revert; opacity:revert; outline:revert; overflow:revert; padding:revert; table-layout:revert; text-align:revert; text-indent:revert; text-orientation:revert; text-overflow:revert; text-transform:revert; vertical-align:revert; white-space:revert; width:revert; word-break:revert; word-spacing:revert; writing-mode:revert; zoom:revert">
You don't often get email from <a href="mailto:ngtech1ltd@gmail.com" target="_blank">
ngtech1ltd@gmail.com</a>. <a href="https://aka.ms/LearnAboutSenderIdentification" target="_blank" style="background:revert; color:revert; direction:revert; display:revert; font-size:revert; opacity:revert">
Learn why this is important</a> </div>
</td>
<td valign="middle" align="left" width="75px" bgcolor="#EAEAEA" cellpadding="7px 5px 7px 5px" color="#212121" style="background-image:revert; background-position:revert; background-size:revert; background-repeat:revert; background-origin:revert; background-clip:revert; border:revert; direction:revert; display:revert; height:revert; letter-spacing:revert; line-height:revert; margin:revert; opacity:revert; outline:revert; overflow:revert; table-layout:revert; text-indent:revert; text-orientation:revert; text-overflow:revert; text-transform:revert; vertical-align:revert; white-space:revert; word-break:revert; word-spacing:revert; writing-mode:revert; zoom:revert; width:75px; background-color:rgb(234,234,234); padding:7px 5px; font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; font-size:12px; font-weight:normal; color:rgb(33,33,33); text-align:left">
</td>
</tr>
</tbody>
</table>
<div>
<table border="0" cellspacing="0" cellpadding="0" align="left" width=""100%"" style="width:100%">
<tbody>
<tr>
<td style="background:rgb(145,10,25); padding:5.25pt 1.5pt"></td>
<td width=""100%"" cellpadding=""7px" color=""#212121"" style="width:100%; background:rgb(253,242,244); padding:5.25pt 3.75pt 5.25pt 11.25pt">
<div>
<p><span>Naviga WARNING: External email. Please verify sender before opening attachments or clicking on links.</span></p>
</div>
</td>
</tr>
</tbody>
</table>
<br>
<div>
<div dir="ltr">
<div>Hey,</div>
<div><br>
</div>
<div>Did you manage to find a solution for your use case?</div>
<div>Let me know if you need assistance with this issue.</div>
<div><br>
</div>
<div>Eliezer</div>
<div>
<div dir="ltr">
<div dir="ltr">----<br>
Eliezer Croitoru<br>
Tech Support<br>
Mobile: +972-5-28704261<br>
Email: <a href="mailto:ngtech1ltd@gmail.com" target="_blank">ngtech1ltd@gmail.com</a><br>
</div>
</div>
</div>
<br>
</div>
<br>
<div>
<div dir="ltr">On Tue, Mar 4, 2025 at 1:57 AM Doug Tucker <<a href="mailto:doug.tucker@navigaglobal.com" target="_blank">doug.tucker@navigaglobal.com</a>> wrote:<br>
</div>
<blockquote style="margin:0px 0px 0px 0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex">
<div>
<div dir="ltr">
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I have read through everything I can find on this subject but still cannot seem to get around the issue of windows updates not working through the squid transparent proxy. No matter what I try I continue to see this in the cache log and windows update will
not connect.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
2025/03/03 23:26:55 kid5| Error negotiating SSL on FD 25: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (1/-1/0)</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I tried adding the info from the following doc to no avail.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<a href="https://wiki.squid-cache.org/SquidFaq/WindowsUpdate" originalsrc="https://wiki.squid-cache.org/SquidFaq/WindowsUpdate" id="x_m_-7666119030896451804x_m_288323372412584365LPlnk" target="_blank">https://wiki.squid-cache.org/SquidFaq/WindowsUpdate</a></div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
The relevant parts of my squid.conf:</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
#Handling HTTPS requests</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
https_port 3130 cert=/etc/squid/ssl/squid.pem ssl-bump intercept</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
acl SSL_port port 443</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
http_access allow SSL_port</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
acl allowed_https_sites ssl::server_name "/etc/squid/allowed-sites.txt"</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
acl step1 at_step SslBump1</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
acl step2 at_step SslBump2</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
acl step3 at_step SslBump3</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
ssl_bump peek step1 all</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
ssl_bump peek step2 allowed_https_sites</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
ssl_bump splice step3 allowed_https_sites</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
ssl_bump terminate step2 all</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
#windows update</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
acl DiscoverSNIHost at_step SslBump1</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
acl NoSSLIntercept ssl::server_name_regex -i "/etc/squid/url.nobump"</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
ssl_bump splice NoSSLIntercept</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
ssl_bump peek DiscoverSNIHost</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
ssl_bump bump all</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I ran tcpdump and added every url i could find to the allowed-sites.txt and added the 2 sites recommended tot he url.nobump. If anyone has gotten this to work any help would be appreciated. </div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div id="x_m_-7666119030896451804x_m_288323372412584365Signature" style="color:inherit">
<div id="x_m_-7666119030896451804x_m_288323372412584365divtagdefaultwrapper" dir="ltr" style="background-color:rgb(255,255,255); color:inherit">
<div style="background-color:rgb(255,255,255); margin:0px">
<p style="text-align:left; line-height:11.55pt; background-color:white; margin:0in; font-size:11pt">
<span style="font-family:Calibri,sans-serif; color:black"><b>Doug Tucker</b><br>
Sr. Director of Networking and Linux Operations</span></p>
<p style="text-align:left; line-height:15.4px; background-color:white; margin:0in; font-size:11pt">
<span style="font-family:Calibri,sans-serif; color:black"><b>o:</b> 817.975.5832 <br>
<b>e: </b><a href="mailto:doug.tucker@navigaglobal.com" target="_blank">doug.tucker@navigaglobal.com</a> </span></p>
<p style="text-align:left; line-height:15.4px; background-color:white; margin:0in; font-size:11pt">
<span style="font-family:Calibri,sans-serif; color:rgb(0,0,0)"><br>
</span></p>
<div style="background-color:white; margin:0px 0in">
<p style="text-align:left; line-height:15.4px; font-family:"Times New Roman"; font-size:12pt">
<span style="color:rgb(0,0,0)">Newscycle Solutions is now Naviga. Learn more.</span></p>
<p style="text-align:left; line-height:15.4px; font-family:"Times New Roman"; font-size:12pt">
<span style="color:rgb(0,0,0)"><br>
</span></p>
<p style="text-align:left; line-height:15.4px; font-family:"Times New Roman"; font-size:12pt">
<span style="color:rgb(0,0,0)">CONFIDENTIALITY NOTICE: The contents of this email message and any attachments are intended solely for the addressee(s) and may contain confidential and/or privileged information and may be legally protected from disclosure. If
you are not the intended recipient of this message or their agent, or if this message has been addressed to you in error, please immediately alert the sender by reply email and then delete this message and any attachments. If you are not the intended recipient,
you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibite</span></p>
<div style="text-align:justify; line-height:15.4px; font-family:Calibri,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="https://lists.squid-cache.org/listinfo/squid-users" originalsrc="https://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">https://lists.squid-cache.org/listinfo/squid-users</a><br>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</body>
</html>